Privacy Notice on the Processing of Personal Data
1. Data controller
PERAİST İnşaat Yazılım Danışmanlık Ticaret Ltd. Şti. ("Peraist"). MERSIS 0728040533900001. Pancarlı Mah. 58080 Sk. Park No: 4, 27060 Şehitkamil, Gaziantep, Türkiye. kvkk@peraist.com.tr
This notice explains, under Article 10 of Turkish Law No. 6698 on the Protection of Personal Data (the "Law"), how we process your personal data when you visit peraist.com.tr and use its contact and job application forms. The address peraist.dev redirects to this site. The site runs on Axolith, our own product.
2. When you visit the site
Your IP address and port, browser information, the page requested and the date and time are written to server logs. The purposes are the secure operation of the site, the prevention of abuse and our traffic logging obligation under Law No. 5651. The legal grounds are our legal obligation arising from data security and Law No. 5651 (Art. 5(2)(ç)) and our legitimate interest (Art. 5(2)(f)). Details of the traffic log (fields, recipients, retention) are in the "Traffic log" section of the Axolith privacy notice; Peraist is the data controller in that section as well.
Visit statistics: We count, on our own server and without cookies, how many times a day each page is opened in each language. We do not record your IP address or anything that identifies you, and we do not track you across sites. If your browser sends a GPC or DNT signal, you are not counted. You can opt out of this count with the "Opt out of visit statistics" link in the Cookie Policy. The legal ground is our legitimate interest (Art. 5(2)(f)).
3. Contact form
Your name and surname, e-mail address, telephone number if you entered it and your message, together with the language and time of submission and the version of this notice in force at that time. To limit many submissions in a short time, we keep a keyed digest of your IP address (not the IP address itself) for 1 hour. The purpose is to reply to your request and to conduct offer or partnership discussions. The legal ground is Art. 5(2)(c) where your request concerns the conclusion of a contract, and otherwise our legitimate interest (Art. 5(2)(f)).
4. Job application form
Your name and surname, e-mail address, telephone number, the position you apply for, your cover letter if you wrote one, your CV file and the education and work experience it contains, the language and time of submission, and the 1-hour IP digest described above. The purposes are to assess your application, contact you and arrange interviews, consider your application for suitable positions opening within 1 year of the application date, and protect our rights in possible disputes. The legal grounds are Art. 5(2)(c) (directly related to the conclusion of an employment contract), Art. 5(2)(f) (our legitimate interest in considering you for new positions) and Art. 5(2)(e) (establishment, exercise or protection of a right).
We do not ask for special categories of data such as health, religion, ethnic origin, trade union membership or criminal records. If they appear in your CV or cover letter, they are not used in the assessment; when we notice them we may delete your file and ask for a CV without that information. If you give other people's contact details as references, we contact them only at a later stage of the assessment and after informing you. Your CV file is stored encrypted on our server in Istanbul, is not stored abroad and is not backed up. Only employees we have authorised to handle applications see your application. If you are hired, your application data is transferred to your personnel file.
5. Who we share data with
We do not sell your data or use it for advertising. Data may be disclosed to legally authorised public authorities and courts on request, under our legal obligation (Art. 5(2)(ç)). To provide the service we share data only with the following providers and only as far as necessary (Art. 8 and 9 of the Law):
- In Türkiye: AWS Turkey Pazarlama Teknoloji ve Danışmanlık Hizmetleri Ltd. Şti. (Amazon Web Services), Istanbul: site server, database, CV files, traffic log.
- Abroad: Amazon Web Services, Frankfurt (Germany): images on the site (photos and images already published openly on the pages) and database backups encrypted with our own key. Cloudflare, Inc. (USA): secure and fast delivery of site traffic; your IP address, browser information and what you type into forms are processed on Cloudflare's servers in transit; the connections between your browser and Cloudflare and between Cloudflare and our server are encrypted. Hetzner Online GmbH (Germany): our e-mail infrastructure; when we reply to you by e-mail, our correspondence and the notification copy of the information you sent through the contact form are stored there.
The Personal Data Protection Board has not declared an adequacy decision for these countries. These providers have not yet signed the Turkish standard contract announced by the Board; this section will be updated once it is signed and notified to the Authority.
6. Retention
Contact form requests are deleted automatically 2 years after submission; job applications and CV files 1 year after submission. Detailed server logs are kept for 90 days and the traffic log required by Law No. 5651 for 400 days. The IP digest is deleted after 1 hour. Deleted records drop out of the encrypted database backups, and images removed from the site drop out of storage, within 30 days at the latest; CV files are not backed up. Logs kept by Cloudflare are subject to the provider's own periods. We carry out deletions automatically every day and keep a record of them.
7. Your rights
Under Article 11 of the Law, you have the right to:
- Learn whether your personal data is processed and, if so, request information about it.
- Learn the purpose of processing and whether the data is used in line with that purpose.
- Know the third parties in Türkiye and abroad to whom the data is transferred.
- Request correction if the data is incomplete or inaccurate, deletion or destruction of the data in accordance with the Law, and notification of these actions to the parties to whom the data was transferred.
- Object to a result against you arising from analysis carried out exclusively by automated systems.
- Request compensation for damage you suffer due to unlawful processing.
8. How to apply
You can submit your request in one of the following ways:
- In writing to our head office address above.
- From the email address you have previously given us and that is registered in our system, to kvkk@peraist.com.tr.
Your request must state your name, surname, signature (for written requests), Turkish ID number (for foreigners, nationality and passport or ID number), address for notifications, email address if any, and your request (Communiqué on the Procedures and Principles of Application to the Data Controller).
We will conclude your request within 30 days at the latest and, as a rule, free of charge. If your request is rejected, if you find the response insufficient or if no response is given in time, you may file a complaint with the Personal Data Protection Board under Art. 14 of the Law.
Under the criteria set out in the Personal Data Protection Board's decision No. 2023/1154 of 06.07.2023 (fewer than 50 employees per year and an annual balance sheet total of less than 100 million Turkish lira), our company is exempt from the obligation to register with the Data Controllers' Registry (VERBİS). This exemption does not remove our other obligations under the Law.
Visit counter: to see how much interest each page gets, the page opened, the language and the date are turned into totals (legitimate interest, Article 5(2)(f) of the Turkish Personal Data Protection Law No. 6698). Only totals per day, page and language are kept; your IP address, browser details or any identifier are not recorded and no cookies are used. You can opt out with the "Opt out of visit statistics" link in the Cookie Policy.